Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: 4w/nEGWhgYlxMomBT9QyZyknzC0JfCajRN+xDAbl82s=
Subject key identifier: FA:E3:D1:0B:58:FC:78:9C:18:6C:85:EC:82:AF:49:3F:F5:98:49:23
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0198315D63149DC96D5C771D0BC40188101B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0A20
Signing time: Tue 22 Jul 2025 09:01:00 +0000
Manifest this update: Tue 22 Jul 2025 09:01:00 +0000
Manifest next update: Wed 23 Jul 2025 09:01:00 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: RmnDdsLOXuYVeBtzk45Fhtcu/rM9qI55jMj9/p5uzRE=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:5d:63:14:9d:c9:6d:5c:77:1d:0b:c4:01:88:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jul 22 09:01:00 2025 GMT
Not After : Jul 23 09:01:00 2025 GMT
Subject: CN=fae3d10b58fc789c186c85ec82af493ff5984923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:d2:ac:04:de:b4:94:ba:cd:e0:33:5b:15:
fa:36:e5:72:07:ab:0a:3b:4d:5a:3a:9a:86:bd:ec:
97:08:82:a7:ff:4b:d0:c2:35:a4:fb:0b:c2:3e:bf:
92:e6:65:c4:a5:2e:b1:5e:f8:a5:b7:6e:60:e7:1b:
4a:b7:47:b7:d3:15:03:d8:75:70:62:71:55:f2:05:
54:f5:e0:64:c6:b4:79:71:eb:0d:fb:6c:2f:9e:40:
9f:a6:9d:5d:46:f2:70:7e:32:03:23:99:4f:75:37:
32:ac:f1:56:80:1b:bb:e4:65:13:83:32:54:33:91:
64:8d:f6:82:01:5c:0d:9b:9b:af:f5:f5:fd:51:28:
fc:d0:50:c4:a5:c4:d7:50:38:bf:f4:dc:6d:6a:41:
71:7d:1b:f8:78:45:cd:54:15:00:a4:b8:eb:6b:a9:
a8:ad:f4:a8:59:67:bc:1f:74:cd:1c:8b:bb:d5:2a:
f3:6e:11:73:b9:d7:96:1e:e8:4e:13:3b:e4:58:5d:
10:8d:a0:63:f0:81:35:63:21:a6:51:ca:d4:bb:b6:
ce:86:1f:83:07:35:4c:f6:f5:7f:10:8f:1c:a9:39:
5a:56:cf:b8:8a:2b:51:0b:8e:8f:13:f8:41:fd:51:
b5:a4:bf:c3:6c:f4:3b:af:fe:61:92:92:1d:34:5e:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E3:D1:0B:58:FC:78:9C:18:6C:85:EC:82:AF:49:3F:F5:98:49:23
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d4:44:7a:aa:65:af:15:46:38:26:13:4a:21:9d:e7:d2:74:
73:a9:db:21:6a:b8:51:bc:e4:55:ba:ca:22:0d:0d:c6:eb:98:
b1:a3:af:03:df:46:2c:90:12:ca:1f:4f:7d:3a:1f:27:c7:32:
8f:f4:b0:dd:44:ae:aa:06:12:03:42:b8:72:c8:a1:e8:a8:8e:
83:c5:f2:78:eb:28:55:c1:32:2b:8d:19:af:c6:60:bf:0a:05:
39:30:dc:01:2c:d6:b9:50:97:21:dd:b3:3b:a7:37:f4:ea:32:
c9:9a:e6:a0:aa:c8:ca:41:ce:b6:45:58:26:f8:cc:8f:d4:2d:
cb:74:cd:05:93:b3:c8:79:4a:26:9b:50:0a:f4:21:57:10:e1:
fa:e1:5d:ae:65:49:b7:f1:d4:3e:14:d1:3f:82:90:6b:aa:f9:
8f:a0:0a:45:c5:a7:3e:6e:2c:48:f9:7e:13:50:84:c2:8f:83:
18:4c:ed:32:23:38:32:95:76:1e:9c:2a:29:a3:6f:06:5b:8d:
e6:b9:23:d9:34:4f:0c:ee:f1:92:fb:4d:05:d7:65:3e:9c:77:
39:21:35:31:9a:2c:49:2b:9e:6e:00:90:af:57:e2:b0:77:29:
32:bd:ad:04:41:44:b8:5d:8c:fa:fb:05:a2:d2:84:33:92:32:
20:2d:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:27 2025 by rpki-client